Aruba SASE
Tackle Today’s Networking and Security Challenges with HPE Aruba Networking Unified SASE
What is SASE?
Secure Access Service Edge or SASE is an architecture that combines comprehensive WAN capabilities including SD-WAN, routing, and WAN optimization with cloud-delivered security services such as SWG, CASB, and ZTNA.
As users connect from anywhere and access sensitive data in the cloud, SASE brings a more secure and flexible way to connect by not backhauling application traffic to a data center. Instead, SASE intelligently steers the traffic to the cloud and performs advanced security inspection directly in the cloud.
SASE addresses the need for improved application performance and increased network security as the number of remote users increases and as enterprises continue to migrate applications to the cloud.
Benefits of SASE:
- Enhanced Security
- Improved business productivity and customer satisfaction
- Increased IT efficiency and lower overall WAN and security costs
Why SASE?
Rise of Hybrid Work Culture
With the rise in hybrid and remote working, people and teams are distributed across which has a major impact on the security over the network. Organizations need a solution that can securely connect their distributed workforce from anywhere, any device and protect the corporate data.
Adaptation to Cloud Centric Architectures
Most of the organizations are in the process of transforming with cloud services such as SaaS, IaaS etc., which requires an advanced network security approach, which secures the sensitive data hosted in the cloud as the users are exposed to increased cyber threats.
Complexity and Inefficiency
Today’s dynamic environments demand better than traditional networking’s reliance on multiple appliances and error-prone manual configurations. Backhauling traffic to centralized security checks creates latency and bogs down user experience.
Increased Cybersecurity Risk
With distributed workforce, the number of users and locations to protect has increased. Organizations are now exposed to deal with more potential chances for cyber-attacks. SASE augmented with an advanced SD-WAN provides the highest IoT security
Components of SASE
The main components of SASE are advanced SD-WAN and comprehensive cloud-delivered security (Security Service Edge or SSE).
There are key advanced SD-WAN capabilities to fully enable SASE:
- Tight integration with multiple cloud-delivered security services to avoid vendor lock-in
- First-packet application identification to enable granular steering of traffic
- SaaS acceleration and WAN optimization
- Best path selection based on business needs and quality of service (QoS)
- Tunnel bonding to combine multiple links and support automated failover
- Zero-touch provisioning to automatically deploy remote sites and seamlessly implement change
There are key SSE capabilities to fully enable SASE:
- ZTNA or Zero-Trust Network Access: assumes that no user can be trusted by default and supports least privileged access. It provides secure access to remote users.
- CASB or Cloud Access Security Broker: protects sensitive data in cloud applications by enforcing security policies
- SWG or Secure Web Gateway: protects organizations from web-based threats using several techniques such as URL filtering and malicious code detection.
- FWaaS or Firewall as a Service provides firewall functionality in the cloud to analyze the traffic from multiple sources.
- Other security services such as Data Loss Prevention (DLP), Remote Browser Isolation (RBI) and sandboxing.